Certified Cloud Security Professional (CCSP)Cloud Concepts, Architecture and DesignMedium
A cloud security architect is tasked with ensuring that all cloud resources provisioned within their organization's accounts adhere to strict security baselines and compliance requirements. They need a mechanism to automatically evaluate configurations against predefined policies and prevent the deployment of non-compliant resources. Which cloud security concept is MOST relevant for this capability?
- AIdentity and Access Management (IAM)
- BSecurity Orchestration, Automation, and Response (SOAR)
- CSecurity Information and Event Management (SIEM)
- DCloud Security Posture Management (CSPM)
Show answer & explanationAnswer & explanation
Correct answer: D. Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) tools continuously monitor and evaluate cloud configurations against security policies and compliance benchmarks, identifying misconfigurations and often providing capabilities to prevent the deployment of non-compliant resources.
Why the other options are wrong
- A. IAM manages user access, not continuous evaluation of resource configurations against baselines.
- B. SOAR automates incident response, not continuous configuration compliance.
- C. SIEM focuses on collecting and analyzing security logs and events, not continuous configuration compliance.
Cloud Security Posture Management (CSPM)
A category of security tools that continuously monitor cloud environments for misconfigurations, compliance violations, and security risks, providing visibility and remediation guidance.
- Automates compliance checks against benchmarks.
- Identifies misconfigurations and security risks.
- Provides visibility into cloud security posture.
Memory trick: SIEM, CSPM, SOAR, IAM: Know your cloud security alphabet.